TOTushar Openiaminopeniam.hashnode.dev·Sep 10 · 7 min readThe Access Review Your Auditor Cannot Rely OnThe quarterly access certification campaign closed on schedule. Every item on the list received a decision. The completion rate was 100%. The records are filed. Then the auditor asks a follow-up quest00
MDMirna De Jesus Camberoincodelikeawoman.com·Sep 1 · 5 min readThree Cloud Access-Control Limits That Might Surprise You When Migrating Services at ScaleThe principle of least privilege is an access-control approach in which a user or service receives only the permissions needed to perform its job. For example, a service that reads files from a specif00
Rrathsarainrr-cyber.hashnode.dev·Aug 31 · 19 min readOpenID Connect: The Identity Layer OAuth Was MissingBy the time I actually heard the word OIDC, I'd already been through OAuth and PKCE conversations I hadn't fully understood, years apart from each other, and this one arrived even later than those. It00
Rrathsarainrr-cyber.hashnode.dev·Aug 6 · 15 min readIdentity Foundations: Everything Before OAuthBefore any protocol makes sense on its own terms, a few things underneath it need to be settled first: what authentication and authorization actually are as distinct concepts, how identity gets carrie13N
Rrathsarainrr-cyber.hashnode.dev·Aug 5 · 9 min readIdentity Was the Gap I Did Not Know I HadI had worked across cloud security engineering, vulnerability assessment, penetration testing, and application security. I had reviewed IAM configurations across multiple cloud platforms, flagged over11N
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 18 · 4 min readFAM CTF : The Vault Door WriteupSummary NexaVault is a mock internal dashboard app that gates an "Admin Vault" panel behind a role claim in a JWT. The app issues a user-role token on login, stored in the nx_access cookie, and trusts00
MSManuela Schrittwieserinneuralstackms.tech·Jul 16 · 7 min readIdentity & Trust: The Foundation of Secure AI SystemsNeuralStack | MS — AI Security Every security control eventually reduces to two questions: who is acting, and how much should they be believed. Access control answers the first question. Trust calibra00
RARJ Abellinricocyberstack.hashnode.dev·Jun 30 · 8 min readAttack Surface Management in the Quantum EraIn cybersecurity, people often talk about advanced threat actors, dangerous viruses, new software weaknesses, and the future risks of quantum computers. But in reality, most security breaches happen b00
TSTech Skill Schoolintechskillschool.hashnode.dev·Jun 17 · 8 min readTop 15 Cybersecurity Skills Companies Are Hiring For in 2026Cybersecurity skills 2026, top cybersecurity skills, and in-demand cybersecurity skills continue to dominate hiring conversations as organizations battle escalating threats in an increasingly digital 00
OZOnela zandile Mtyoboinsystemsandscale.hashnode.dev·Apr 22 · 2 min readInfrastructure Leadership Through Governance, Compliance, and Automation Thinking.This is where I stand as an emerging Infrastructure Leader My journey into infrastructure leadership is shaped by an unconventional foundation — Criminal Justice ⚖️. At first glance, it may seem unrel00
